CVE-2020-19882

CVE-2020-19882 affects DBHcms v1.2.0. A stored XSS vulnerability exists due to missing htmlspecialchars handling for the ‘menu_description’ variable in the code paths dbhcms/mod/mod.menus.edit.php (line 83) and dbhcms/mod/mod.menus.view.php (line 111). The issue could allow a remote attacker auth...

CVE-2020-19882: Improper Neutralization of Input During Web Page Generation

DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menudescription' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users...